Platform Capabilities

Attribute-Based Access Control (ABAC) Phase 1: Foundations

Introducing Attribute-Based Access Control (ABAC), a new access-control model that brings record-level access management to the OneTrust Platform as part of ABAC Phase 1: Foundations. ABAC complements the platform's existing Role-Based Access Control (RBAC) model by adding more granular control over who can access specific records and what actions they can perform. Rather than granting access to all records within a solution, ABAC uses assignments and attributes to determine which records a user can access and what permissions they have on those records, helping organizations implement least-privileged access more effectively.

ABAC Phase 1: Foundations is available for supported objects across AI Governance, Privacy Automation, Tech Risk & Compliance, and Third-Party Management.

At General Availability, all supported objects have feature parity within the context of ABAC Phase 1 capabilities, excluding assessments. ABAC is enabled in all tenants regardless of packaging and pricing, and customers who used share modals in Data Mapping Automation are migrated to the new sharing experience automatically.

OneTrust Activity Logs

Gain a unified, real-time view of user and system audit events across the OneTrust Platform with the Activity logs screen to increase visibility and control, investigate issues faster, and meet compliance requirements with a complete, traceable audit trail. Through a centralized audit experience, teams can quickly search and filter audit records, monitor activity across solutions from a single location, and export audit data for broader reporting and analysis. The General Availability release includes the following additional enhancements for this feature:

• The Activity log screen now opens with a 30-day filter applied by default, and a notification banner lets you know the filter is active so you can adjust the date range as needed.

• Integration events are now captured in the audit record, with activity payloads and message formatting standardized across Global Activity and integration events for more consistent, traceable audit data.

• Process agent actor information in all audit exports and downstream integrations so that all your work receives a consistent and complete picture of agent-initiated activity.

• Captures the network context for events, such as original caller's IP address and device details for actions performed, to identify the actual source system and support incident investigation and compliance reviews.

• Document download and file attachment events are recorded during exports and bulk actions to understand what actions were performed and maintain audit evidence.

• Activity information is also available in the activity tabs of supported and subscribed product areas, such as users, organizations, and risks. In these areas, you can filter an entity's activity by event type when the option is available.

• The standardized Activity Record Created event is now available for sending audit information to SIEM tools. The existing, renamed Activity Record Created (Legacy) event is still supported and will be deprecated in the Spring '27 Release. For more information, see Integrating OneTrust Activity Logs with External SIEM Tools .

Integrations Retry Queue (DLQ) Management

Reprocess or purge selected events in the new Retry Queue, which is now hosted in the Logs tab, and replaces the existing Message Container experience. These updates are designed to give admins control over failed and pending messages, helping them recover failed events without discarding pending ones and see exactly what changed after each action.

OneTrust AI Features on by Default

As of the OneTrust 202611.1.0 release, AI Features in General Availability will be turned on by default for new customers outside of the EU and UK. EU, UK, and dedicated environments are not impacted and will remain on an opt-in model. This enhancement promotes visibility and usage of OneTrust AI Features for eligible environments without prior configuration.